$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa File: 355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa (raw, json) Hash identifier: 98rR0zxsESMvRvC+GXwzrfpjHm5CuD4UYOzkgUxgaV0= Subject key identifier: FD:07:F4:30:8E:35:05:D2:8C:45:77:88:A4:D4:5C:DF:90:88:F0:04 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285848C84BDB88087ADD36B2749E00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa Signing time: Wed 05 Feb 2025 14:00:51 +0000 ROA not before: Wed 05 Feb 2025 14:00:51 +0000 ROA not after: Tue 06 May 2025 13:00:51 +0000 asID: 396982 IP address blocks: 35.228.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c8:4b:db:88:08:7a:dd:36:b2:74:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Feb 5 14:00:51 2025 GMT Not After : May 6 13:00:51 2025 GMT Subject: CN=0e2047b4-44c5-4faa-9973-ef06f46fcf8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:94:99:99:70:c3:32:ed:76:d8:0a:c9:ad:bd: 85:e5:56:07:b4:e2:fb:97:c7:78:c4:59:2c:5b:26: ba:29:05:9d:00:83:91:6d:7b:8c:d7:c2:a1:59:27: fd:4b:62:b4:ca:90:fb:c8:35:16:06:cb:6c:c8:9f: 26:59:41:49:4e:d5:31:5b:67:c3:69:8a:ad:bc:97: 7b:1a:a0:9d:62:33:27:2a:7b:d6:7b:7c:c8:69:8c: bc:4e:0d:90:74:b9:06:9c:ed:c3:a6:21:05:8e:55: 2e:d2:20:a3:0d:ab:9a:86:c9:00:ba:18:3e:20:83: ce:a7:16:ce:e8:76:9a:1a:4e:52:1c:48:9b:d5:fc: 49:a3:49:ba:31:aa:3c:81:61:14:83:35:b7:b9:7b: 02:aa:f9:81:4e:4b:ce:76:44:4d:d1:e3:c7:ea:3b: d1:92:57:d7:41:ca:58:83:b3:af:6e:76:29:23:48: 01:96:8c:53:63:13:3c:2d:17:7e:ff:04:7e:c3:79: f7:ed:50:20:bc:d0:83:f6:f0:b7:3a:b6:d9:db:42: 66:41:36:b3:d1:56:ca:59:4f:20:3c:df:24:87:45: 14:0b:65:ab:fc:a6:a2:62:1b:25:f6:cb:a9:6d:31: e7:88:02:5e:dd:43:7d:b7:7e:91:c8:83:61:30:7b: 23:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:07:F4:30:8E:35:05:D2:8C:45:77:88:A4:D4:5C:DF:90:88:F0:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/355ffca8-b8a3-3cb5-b5d7-5c4a71c6765f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 35.228.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:9c:64:48:af:c0:d9:66:53:44:e3:e5:d7:c8:07:0a:98:49: 05:f6:81:28:cd:21:8f:9a:27:28:40:3f:a6:36:d9:af:c4:0c: 53:1c:5d:d3:a4:40:2b:96:0a:8e:03:3a:ed:83:a2:a4:c7:8e: 50:1f:b9:dc:4b:a2:53:a7:f2:08:89:c3:d4:b0:ef:8e:b1:2e: 9f:ff:ef:6d:0a:b6:47:a0:e8:38:19:eb:c7:c0:8c:cd:e4:02: e5:69:05:85:15:ee:a2:77:ae:fe:5f:31:64:3e:ee:88:c9:86: bd:49:07:76:63:86:de:31:28:68:99:17:f0:f0:48:66:81:c6: d2:47:5e:f7:df:b0:25:c3:80:40:ac:53:e7:fa:59:e0:b8:d3: fe:c4:a9:c8:1f:ff:1f:6f:f1:92:c9:ae:c7:ea:9c:89:ff:2c: 13:4d:fa:6d:d0:dd:94:81:b0:d4:54:3e:f4:94:85:78:27:56: e2:4f:c1:43:90:24:d6:51:f3:ea:5f:14:4d:6a:a1:81:35:8c: ee:3e:81:78:4d:8c:3e:ae:13:a6:c5:c4:93:a7:18:19:5f:19: 4b:03:ba:63:6d:f1:d2:ae:3d:04:86:b4:1c:47:98:77:c5:44: 25:73:d3:37:6e:e0:e8:c4:24:f0:bd:f4:01:46:df:44:b1:98: 9a:eb:dc:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS9uICHrdNrJ0ngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk MGUyMDQ3YjQtNDRjNS00ZmFhLTk5NzMtZWYwNmY0NmZjZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJSZmXDDMu122ArJrb2F5VYHtOL7l8d4xFks Wya6KQWdAIORbXuM18KhWSf9S2K0ypD7yDUWBstsyJ8mWUFJTtUxW2fDaYqtvJd7 GqCdYjMnKnvWe3zIaYy8Tg2QdLkGnO3DpiEFjlUu0iCjDauahskAuhg+IIPOpxbO 6HaaGk5SHEib1fxJo0m6Mao8gWEUgzW3uXsCqvmBTkvOdkRN0ePH6jvRklfXQcpY g7OvbnYpI0gBloxTYxM8LRd+/wR+w3n37VAgvNCD9vC3OrbZ20JmQTaz0VbKWU8g PN8kh0UUC2Wr/KaiYhsl9supbTHniAJe3UN9t36RyINhMHsjUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0H9DCONQXSjEV3iKTUXN+QiPAEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMzU1ZmZjYTgtYjhhMy0z Y2I1LWI1ZDctNWM0YTcxYzY3NjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEI+TwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADecZEivwNlmU0Tj5dfIBwqYSQX2gSjNIY+aJyhAP6Y22a/EDFMcXdOk QCuWCo4DOu2DoqTHjlAfudxLolOn8giJw9Sw746xLp//720Ktkeg6DgZ68fAjM3k AuVpBYUV7qJ3rv5fMWQ+7ojJhr1JB3Zjht4xKGiZF/DwSGaBxtJHXvffsCXDgECs U+f6WeC40/7Eqcgf/x9v8ZLJrsfqnIn/LBNN+m3Q3ZSBsNRUPvSUhXgnVuJPwUOQ JNZR8+pfFE1qoYE1jO4+gXhNjD6uE6bFxJOnGBlfGUsDumNt8dKuPQSGtBxHmHfF RCVz0zdu4OjEJPC99AFG30SxmJrr3Gk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:40 2025 by rpki-client